Static task
static1
Behavioral task
behavioral1
Sample
ce55e1561df8308693c9e8a1187b8548339d235672074a577c49401a84d1aa35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce55e1561df8308693c9e8a1187b8548339d235672074a577c49401a84d1aa35.exe
Resource
win10v2004-20220812-en
General
-
Target
ce55e1561df8308693c9e8a1187b8548339d235672074a577c49401a84d1aa35
-
Size
116KB
-
MD5
16f55055df6ba0fb5e88ea5d7f278676
-
SHA1
41844534f15bb96d4319f3d87b98cefff29dd247
-
SHA256
ce55e1561df8308693c9e8a1187b8548339d235672074a577c49401a84d1aa35
-
SHA512
2fe0ce849e9c246d4622246523177328af27773a16d02e15ec1acc7bce27130039ea03d76a792f3364dae875c3fb88ebecd1a68f65c7c9c0044a1a6b1360cc2d
-
SSDEEP
1536:w3wqAU62jgeuVhDtUjR8LSKNgZQvKDEiCDQAl+zjGTov1/uO7:g82z0Uj9KN4DET8sooO7
Malware Config
Signatures
Files
-
ce55e1561df8308693c9e8a1187b8548339d235672074a577c49401a84d1aa35.exe windows x86
9e1420b4e758c84b3caf48938fe88692
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetVersion
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
WriteFile
CloseHandle
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetTickCount
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
VirtualAlloc
TlsAlloc
SetFilePointer
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
PostQuitMessage
LoadIconW
MessageBoxA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
FindWindowA
DefWindowProcA
DestroyWindow
BeginPaint
GetClientRect
EndPaint
advapi32
RegOpenKeyExA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ